genericize the .gitignore
add another mapping
preserve case when replacing
dump encrypted value as well, so can easily reference it in the file.